POWER TEAM CREATOR PLATFORM
Effective / last updated: 2 October 2026
This Privacy Policy explains how Power Team Creator Platform, operated by PaM & Co (Paweł Kostrzewa), Poland ("Power Team", "we", "us"), processes personal data when you use powerteambykost.com and our creator tools, including supported TikTok integrations. Contact: data@powerteambykost.com.
Depending on features you choose, we may process account identifiers and usernames; profile information and account statistics; public or authorized video/content metadata; OAuth access and refresh tokens; scopes and authorization state; media you upload; captions and publishing choices; privacy/comment/Duet/Stitch/commercial-content choices; publishing status; Creator History Sync data if separately authorized; IP address, timestamps, request/error/security logs; and communications you send to us. We do not ask for your TikTok password.
Data comes from you, from the social account you explicitly connect through the platform's authorization flow, from content you submit, and from technical logs created when the service is used. We request only the permissions needed for features shown to you.
We process data to provide requested creator features and connected-account functions; authenticate users; show authorized account/content information; prepare previews; carry out creator-initiated draft uploads or publishing; report status; maintain security and prevent abuse; troubleshoot and improve reliability; comply with law; and respond to rights requests. Where GDPR applies, the bases are performance of a contract or steps requested by you, our legitimate interests in operating and securing the service, compliance with legal obligations, and consent where the law or a platform permission flow requires it. You may withdraw consent for future processing where consent is the basis.
Connecting TikTok does not publish anything. The connected creator sees the relevant account and available controls and must explicitly initiate an upload or Direct Post. Available privacy and interaction settings are obtained from TikTok where required. The service does not inject a promotional Power Team watermark into TikTok API exports. TikTok's own privacy policy and terms also apply to TikTok's processing.
If offered and separately authorized, Creator History Sync processes only the TikTok portability scope approved and selected by the creator. The planned feature is limited to Posts & Profile data and excludes Direct Messages and Activity archives. A creator can request refresh no more frequently than supported by the service and can delete imported TikTok portability data using the visible self-service deletion control. See Data Protection documentation.
We do not sell personal data. We disclose data only as needed to operate requested integrations, to hosting/infrastructure and technical service providers acting for the service, to professional advisers where necessary, or to authorities when legally required. Connected-platform data is transmitted to the relevant platform only for actions the user requests or authorizes.
Some service providers or connected platforms may process data outside Poland or the European Economic Area. Where we control such a transfer and GDPR requires safeguards, we use an available lawful transfer mechanism such as an adequacy decision or appropriate contractual safeguards.
We keep personal data only for as long as needed for the stated purpose, security, dispute handling and legal obligations. OAuth credentials are retained while the connection is active or until revoked/deleted, subject to platform expiry. Uploaded working media and operational logs are periodically removed when no longer needed. TikTok portability data is deleted when the creator uses the deletion control or otherwise validly requests deletion, except a minimal deletion-completion/security record where necessary.
We use access controls, restricted server-side credential storage, HTTPS in transit, least-privilege service configuration, logging and operational safeguards appropriate to the service. No internet service can guarantee absolute security; users should protect their own devices and connected accounts.
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing; withdraw consent where applicable; disconnect a connected account; and lodge a complaint with the competent data-protection authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO). We may need to verify identity before fulfilling a rights request.
The creator platform is not intended to let children independently authorize accounts where the connected platform or applicable law requires an older age or parental/guardian authorization. Users must meet the age and authorization requirements of TikTok and other connected services.
We may use strictly necessary cookies or local storage for session security, authorization state and essential functionality. If optional analytics or similar technologies requiring consent are introduced, we will provide the required notice and choice before using them.
We may update this policy as features, providers or legal requirements change. The effective date above identifies the current version. Material changes will be presented through the website or service where appropriate.
Privacy, access and deletion requests: data@powerteambykost.com. General contact: powerteambykost@gmail.com. Operator: PaM & Co (Paweł Kostrzewa), Poland.